Skill

dependency-audit

Audit a project's npm dependencies for known vulnerabilities and risky install scripts before installing, upgrading, or shipping. Use when the user pastes or attaches a package.json/lockfile, lists dependencies, or asks to check/audit/scan their packages for security issues — including comparing two snapshots (a PR diff) or checking license compliance.

Bundled with NPMScan. Its trust score, security findings and other files are on the plugin page.

npx [email protected] add salemalem/npmscan-mcp-plugin